Privacy Policy

1. Identity of the controller

The controller responsible for the processing of personal data described in this Privacy Policy within the meaning of Article 4(7) GDPR is:
Andreas Wandler, trading as EchelonEmprise, Germany
Email: contact@echelonemprise.com
Postal address: see the Imprint

We are not obliged under Article 37 GDPR to designate a data protection officer, and none has been designated.

2. No cookies; no tracking

This website does not set cookies, does not employ analytics services, and does not load advertising pixels or session tracking mechanisms of any kind. Fonts, images, and video are served exclusively from our own domain; accordingly, your browser transmits no request to any third party in the course of your viewing these pages.

3. Server log files

Upon each access to a page of this website, our hosting provider records certain technical data in a log file, comprising: the IP address employed, the date and time of the request, the page requested, the referring page, and information as to the browser and operating system used. Purpose of processing: delivery of the requested page and the maintenance of network and information security. Legal basis: Article 6(1)(f) GDPR, our legitimate interest lying in the secure and reliable operation of this website. Such logs are retained for a limited period and thereafter erased.

4. Contact

Where you communicate with us by way of the contact form or by electronic mail, we process the personal data you thereby provide, namely your name, email address, company, and the content of your message. Purpose of processing: responding to your enquiry and taking steps at your request prior to entering into a contract. Legal basis: Article 6(1)(b) GDPR; and, insofar as your communication does not relate to a prospective engagement, Article 6(1)(f) GDPR. Provision of such data is voluntary; in the absence thereof, we are unable to respond to your enquiry. Your message is retained for so long as necessary for the purpose stated, and thereafter only insofar as statutory retention obligations so require.

5. Recipients and third-country transfers

Two undertakings process personal data on our behalf: the undertaking that hosts this website and delivers submissions made through the contact form (Netlify, Inc.), and the undertaking that operates our electronic mail service (Google Ireland Limited). Both act as our processors pursuant to a data processing agreement within the meaning of Article 28 GDPR, and both process personal data, in part, outside the European Union. Such transfers are undertaken in reliance upon the EU-U.S. Data Privacy Framework and, additionally, upon the standard contractual clauses adopted by the European Commission pursuant to Article 46(2)(c) GDPR.

We do not sell personal data, and we disclose such data to no party other than as set out herein, save where required by law.

6. Booking a call

The buttons appearing on this website link to an external booking service. That service is not embedded within this website; it is reached only upon your affirmative act of clicking. From that point, the operator of the booking service processes your data under its own privacy policy, and we receive from that operator the booking particulars you have entered. Purpose of processing: the arrangement and conduct of the call. Legal basis: Article 6(1)(b) GDPR.

7. Your rights

You are entitled to the right of access to your personal data (Article 15 GDPR), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to data portability (Article 20), and the right to object to processing undertaken on the basis of our legitimate interest (Article 21). Where processing is founded upon your consent, you are entitled to withdraw such consent at any time, with effect for the future.

You further have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. The supervisory authority with jurisdiction over us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany. You may, in the alternative, lodge a complaint with the supervisory authority of the place of your habitual residence or place of work.

8. No automated decision-making

We do not subject you to any decision based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

9. Amendment

This Privacy Policy shall be amended concurrently with any change to this website.